Shadow IT Assessment Workshop (Remote) — Cloud App Discovery & Control

The Shadow IT Assessment Workshop (Remote) is a 2-day remote training engagement that helps organizations discover and assess cloud applications and services being used without the IT department’s knowledge. IT Partner uses Microsoft Cloud App Security to evaluate cloud app usage from the organization’s network and provides findings, recommendations, and a prioritized Cloud Usage Visibility and Control Road Map.

This workshop is intended for organizations using Office 365 or Microsoft 365 that want better visibility and control over unapproved or unknown cloud application usage. It is especially relevant when IT leaders need to compare cloud security objectives with actual cloud usage discovered from network activity.

The Shadow IT Assessment Workshop is a 2-day remote engagement. The stated plan includes a remote kickoff meeting and remote assessment webinars covering education, setup, exploration, discovery, final report review, and the road map.

The listed price for the Shadow IT Assessment Workshop (Remote) is $1,900. The service SKU is ITPWW180TRNOT, and any commercial details beyond the listed fixed price should be confirmed directly with IT Partner.

The workshop includes a kickoff presentation, a pre-assessment questionnaire, a Shadow IT Discovery Report, and a Cloud Usage Visibility and Control Road Map. The discovery report lists possible Shadow IT usage and recommendations for further investigation, while the road map prioritizes actions for improving cloud usage visibility and control.

The Cloud Usage Visibility and Control Road Map is a prioritized, actionable plan for addressing discovered cloud usage, especially usage that appears to be Shadow IT. It maps Microsoft Cloud App Security capabilities to the customer environment and recommends actions based on user impact and implementation cost.

The remote kickoff meeting typically lasts up to two hours and introduces the engagement objectives, flow, responsibilities, and governance. IT Partner also provides and explains the pre-assessment questionnaire so the customer can supply information about cloud adoption, security requirements, regulations, and frameworks.

The workshop webinars cover education and setup, exploration and discovery, and review of the final report and road map. IT Partner reviews the questionnaire, provides readiness on Microsoft Cloud App Security, reviews Cloud App Security reports with the customer, explores cloud usage use cases, and presents discovered Shadow IT findings.

The customer needs a Microsoft 365 tenant and Microsoft Cloud App Security, either through a production Microsoft 365 tenant with CAS via an E5 license or a trial Microsoft 365 tenant with a CAS trial for up to 30 days. The customer also needs access to firewall or proxy logs and should have the Log Collector configured and ready to work.

Yes, Microsoft Cloud App Security is a prerequisite because the assessment uses it to evaluate cloud application and service usage from the organization’s network. The service scope states that the customer can use CAS through an E5 license or use a trial Microsoft 365 tenant and CAS trial for up to 30 days.

The assessment requires access to logs from customer firewalls or proxies because those logs support discovery of cloud application and service usage. The customer should also have the Log Collector configured and ready, and knowledgeable firewall personnel may need to provide credentials for log extraction or adjust firewall rules if necessary.

IT Partner is responsible for understanding the customer’s cloud security objectives, comparing them with real cloud application and service usage, and providing guidance on Microsoft Cloud App Security. IT Partner also provides findings, recommendations, best practices, and a prioritized road map that maps CAS capabilities and partner services to the assessment findings.

The client is responsible for providing accurate, complete, and timely information, typically within three business days or as mutually agreed. The client must also provide access to knowledgeable personnel, including business representatives and firewall administrators, plus access to required systems, networks, applications, and logs.

The service description does not state that the workshop requires planned downtime, because it is a remote assessment based on Microsoft Cloud App Security, questionnaires, and firewall or proxy log analysis. However, any operational impact from log collection, firewall access, or configuration changes should be confirmed with IT Partner and the customer’s network team before the engagement.

The stated scope focuses on discovery, assessment, reporting, recommendations, and a prioritized road map; it does not state that IT Partner will block, remove, or remediate Shadow IT applications during the 2-day workshop. If enforcement actions or application controls are required, they should be discussed separately with IT Partner.

The Shadow IT Discovery Report contains a list of discovered possible Shadow IT usage and recommendations for further investigation. Its purpose is to highlight cloud applications and services that may be unapproved or unknown to IT, based on the assessment of cloud usage data.

Expected outcomes include completion of the Shadow IT Assessment, improved understanding of cloud application and service usage, and recommendations that support better visibility and control. The success criteria include applying good security principles across people, process, and technology and basing the assessment on discovered cloud application and service usage.

After completion, the customer receives the final report and the Cloud Usage Visibility and Control Road Map for prioritizing next steps. The road map is intended to guide follow-up actions, but the source scope does not state that implementation of those actions is included in the 2-day workshop.

Yes, the service notes that an onsite form of the workshop is available separately. The listed service described here is the remote version of the Shadow IT Assessment Workshop.

The source service description does not list specific out-of-scope items or additional-cost items. Based on the stated scope, buyers should treat the engagement as a 2-day remote assessment and training workshop with reporting and a road map, and should confirm any remediation, deployment, or enforcement work separately with IT Partner.